India

Why a shared seat here

The statutory calendar starts on day one and never lets up. First board meeting within thirty days of incorporation, first auditor appointed within thirty days of registration, commencement of business declared within a hundred and eighty days before the company may legally trade at all. Then four board meetings a year with no more than a hundred and twenty days between two, an annual meeting within six months of year end, financial statements within thirty days of that meeting and the annual return within sixty. Late filing runs at a hundred rupees per form per day with no ceiling.

What makes this market unusual right now is that three separate regimes changed under the same finance team inside eighteen months. The Income-tax Act 2025 replaced the 1961 Act on 1 April 2026, so every section number a finance team knew is now a different number. The four labour Codes took effect on 21 November 2025. And the data protection rules were notified on 14 November 2025 with an eighteen-month runway. A company that was compliant in 2024 is not automatically compliant in 2026, and somebody senior has to own the transition rather than discover it.

One company law, thirty-six labour regimes

Company law is central and uniform. The Companies Act and the registry work the same way in Mumbai and Guwahati, which is why Atlas treats India as one market rather than several. Labour law is not uniform, and that is the fact a CHRO plans around. Labour sits on the Concurrent List, so every state and union territory frames its own rules under the Codes.

The transition is visibly uneven. As at May 2026 sixteen states and union territories had notified rules under all or most of the Codes, twenty-three still had drafts only, and West Bengal had no draft at all. The Central Rules of May 2026 reach only the sectors where the central government is the appropriate government, which is banking, insurance, telecom, mines, railways, air transport, ports and central public undertakings. A private company in Bengaluru waits on Karnataka. A company hiring across three states in 2026 is running three transitional regimes at once.

One enclave is worth naming separately. GIFT City operates as an International Financial Services Centre under its own regulator, with more than a thousand registered entities and thirty-eight banks. Its tax holiday moved this year from a hundred percent deduction for ten years out of fifteen to twenty years out of twenty-five, with business income taxed at fifteen percent once the deduction period ends.

How the seat is actually engaged

Indian company law draws the line for you, and it draws it in a way that favours this register. A whole-time director is defined as a director in the whole-time employment of the company, so somebody working three days a month cannot be one. More sharply, section 203(3) says a whole-time key managerial person shall not hold office in more than one company at the same time, except in a subsidiary, and the penalty for getting it wrong is five lakh on the company, fifty thousand on each officer in default, and a thousand rupees a day while it continues.

That rule only bites on listed companies and other public companies with ten crore or more of paid-up capital. A private limited company has no statutory obligation to appoint a whole-time CFO or CHRO at all, and that gap is precisely the space a fractional seat occupies. The moment the company lists or crosses that threshold it must appoint a whole-time CFO, and the same section then forbids that person from doing the job anywhere else. The seat is fractional right up to the point where the law says it cannot be.

The money mechanics are straightforward and worth stating. Professional fees carry ten percent withholding under the new Act, on a fifty thousand rupee threshold. Registration for goods and services tax becomes compulsory once turnover passes twenty lakh, and the higher forty lakh threshold is for suppliers of goods only, so it never applies to a professional invoicing services. And where the same person also sits on the board, the tax flips: services supplied by a director to the company are payable by the company under reverse charge.

For a non-resident the rule is not the one people assume. Sitting on a board and visiting is business visa work. Delivering a paid fractional engagement to an Indian company is employment visa work, and the ministry's own guidance sets a floor of twenty-five thousand US dollars a year for the sponsored role, while naming independent consultants on fixed remuneration as an employment visa category rather than a business visa one.

The regulation behind the AI Officer seat

The Digital Personal Data Protection Act received assent in August 2023 and waited two years for its rules. Those arrived on 14 November 2025 with a staged commencement written into rule 1: the board constitution rules at once, consent manager registration after twelve months, and everything that matters to a company, meaning notice, consent, security safeguards, breach notification, significant data fiduciary obligations and cross-border transfer, on 14 May 2027.

What section 10 then asks for reads like a job specification. A significant data fiduciary must appoint a data protection officer who is based in India, is responsible to the board of directors, represents the company under the Act and is the contact point for grievances. It must appoint an independent data auditor and run an impact assessment and an audit every twelve months, with significant observations reported up. And rule 13 adds the clause that makes this an AI seat rather than a privacy seat: the company must exercise due diligence to verify that the algorithmic software it uses to host, display, upload, modify, publish, transmit, store, update or share personal data is not likely to pose a risk to data principals' rights.

The penalties are the reason a board will fund the seat: up to two hundred and fifty crore for failing to maintain reasonable security safeguards, two hundred crore for failing to notify a breach, a hundred and fifty crore for breaching the significant data fiduciary obligations. One caution Atlas will repeat rather than gloss: the government has not yet notified any company or class as a significant data fiduciary, and the power does not take effect until May 2027. Anyone telling you how many Indian companies will need a data protection officer is inventing the number.

What a rate looks like here

Atlas publishes no market rate for India. The full-time comparison comes with a named source at each end of a wide range. Deloitte's India executive performance and rewards survey, published in March 2026, puts median CFO pay at four and a half crore, the sharpest increase of any CXO role that year, off a sample that skews to Nifty50 and other large listed companies. Michael Page's public comparison tool puts an average CFO director salary at one and a half crore, excluding bonus and benefits, on a page that does not state its year.

Neither number describes a startup or a mid-sized private company, and no named, dated public survey of CFO pay at that end of the market exists. Atlas would rather say that than fill the gap with a figure from a content farm. Aon's thirty-second annual survey projects average Indian salary increases of 9.1% for 2026, which is the escalator to apply to any of it.

What the rules mean for the people seat

The Codes are live and most of the rules under them are not, and managing that gap is the job. The four Codes rationalised twenty-nine central labour laws from 21 November 2025, bringing mandatory appointment letters for every worker, social security extended to gig and platform workers, and statutory minimum wages beyond the scheduled employments. The Central Rules of May 2026 add annual health checks, grievance committees at twenty employees, works committees at a hundred and creches at fifty, for the sectors they reach.

Underneath the transition the older thresholds still run the payroll. Provident fund at twenty or more employees on a fifteen thousand rupee wage ceiling, state insurance at ten or more covering employees up to twenty-one thousand a month, and gratuity at ten or more after five years of continuous service. Shops and establishments registration, hours, leave and closure remain state law with no national statute behind them, which is the second reason India is not one jurisdiction for a people seat.

One trigger catches small companies that assume they are too small to be caught. A workplace with ten or more employees must constitute an internal committee under the 2013 harassment Act and file an annual report to the district officer. Failing to constitute it is punishable by fine, and on a second conviction by double the punishment plus cancellation or non-renewal of the licence or registration the business needs to operate.

The bar is the same everywhere

Six tests stand between a leader and a live page, and they do not change from one market to the next. One of them is that two of a leader’s ten senior years were worked in the market they are listed in, which is the test this page exists to make checkable. Read the standard.

Nothing on this page is legal, tax or immigration advice. Rules and fees change, and a figure that was correct when it was written may not be correct when it is read. Verify with a qualified adviser before acting.